blueteamsec

463 readers
40 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
226
1
Bittensor theft campaign via PyPI (about.gitlab.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
227
1
Active Exploitation of SonicWall VPNs (www.huntress.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
228
2
Trust but Verify: An Assessment of Vulnerability Tagging Services | USENIX (www.usenix.org)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
229
3
delete-self-poc: A way to delete a locked file, or current running executable, on disk on Windows (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
230
2
ScarCruft’s New Language: Whispering in PubNub, Crafting Backdoor in Rust, Striking with Ransomware (medium.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
231
1
Subtle Snail (UNC1549, TA455), an Iran-nexus espionage group linked to the Eclipsed Wasp (Charming Kitten) network, has been active since at least November 2022 - IoCs (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
232
1
WSL-Payloads: A small How-To on creating your own weaponized WSL file (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
233
1
Detection Engineering: Practicing Detection-as-Code - Validation - Part 3 (blog.nviso.eu)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
234
1
Linux-persistence: A no-reboot, in-memory Linux persistence PoC leveraging namespace joining, user-namespace elevation, and self‑deletion. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
235
3
The Threat Hunter's Cookbook (www.splunk.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
236
3
SCENE 1: SoupDealer - Technical Analysis of a Stealth Java Loader Used in Phishing Campaigns Targeting Türkiye (www.malwation.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
237
2
クルド人グループによる日本の組織を狙ったサイバー攻撃 - Cyber attacks by Kurdish groups targeting Japanese organizations (jp.security.ntt)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
238
3
Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments (www.cisa.gov)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
239
2
BamboozlEDR: A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
240
3
Hidden Black Hands: How $1.46 Billion Disappeared in Silence - "This incident demonstrates the exceptionally targeted nature of Lazarus's attacks" (mp.weixin.qq.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
241
1
turnt: A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
242
3
Trust Me, I’m a Legitimate Process: Verisimilitude and the Art of Hiding (nasbench.medium.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
243
1
Threat actors: “Please do not use Okta FastPass” (www.okta.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
244
2
From The Depths of the Shadows IRGC and Hacker Collectives Of The 12-Day War (securityscorecard.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
245
3
Cyber Assessment Framework v4.0 released in response to growing threat - UK (www.ncsc.gov.uk)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
246
1
ThrottleStop driver abused to terminate AV processes (securelist.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
247
1
UEFI Bootkit Hunting: Deep Search for Unique Code Behaviors - Chinese (mp.weixin.qq.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
248
1
Stored XSS in OpenVPN Dashboard widget (docs.netgate.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
249
1
yaraast: A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
250
1
GRITREP: Observed Malicious Driver Use Associated with Akira SonicWall Campaign (www.guidepointsecurity.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›